HackingStolen CredentialsCapture Stored DataSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_GOVERNMENTMediumContained
Thornton Construction
bd_5968442ff6e6e06c · schema v1 · pii pii-v1
Full breach record for Thornton Construction →Harvey Construction Corporation notified the New Hampshire Attorney General of a data security incident involving its third-party payroll provider, Paycor. An unauthorized actor downloaded files containing employee PII (including SSNs) via the MOVEit vulnerability on May 31, 2023. Harvey Construction was notified on November 30, 2023. 122 New Hampshire residents were affected. Credit monitoring services were offered.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_9320c843023a3384Vermont State AGfiled 2024-03-04Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/harvey-construction-corporation-20240304.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 4, 2024
- Raw hash
- 050a4c4ac8cb411d6b7a4bb4f08f5d21db837f29c5761ba38254d29161e3eea2
Reporting entity
- Name
- Thornton Constructionnorm: thornton construction
- Domain
- thornton-inc.com
Victim entity
- Name
- Thornton Constructionnorm: thornton construction
- Domain
- thornton-inc.com
Incident
- Discovered
- Nov 30, 2023
- Materiality determined
- Feb 27, 2024
- Notification sent
- Mar 4, 2024
- Affected individuals
- 122
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John Formella
- Third party
- via Paycor
- Initial access
- supply_chain
Compliance
- Time to disclose
- 14 weeks(95 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.